Siemens SINUMERIK
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (22)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-8280US | critical9.8 | — | ||
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable vi… | ||||
| CVE-2019-8277US | high7.5 | — | ||
UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Comb… | ||||
| CVE-2019-8276US | high7.5 | — | ||
UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS). This attack a… | ||||
| CVE-2019-8275US | critical9.8 | — | ||
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appe… | ||||
| CVE-2019-8274US | critical9.8 | — | ||
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack a… | ||||
| CVE-2019-8273US | critical9.8 | — | ||
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack… | ||||
| CVE-2019-8272US | critical9.8 | — | ||
UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network… | ||||
| CVE-2019-8271US | critical9.8 | — | ||
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution. This attack appears to… | ||||
| CVE-2019-8270US | high7.5 | — | ||
UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (DoS) condition. This attack appear to be… | ||||
| CVE-2019-8269US | high7.5 | — | ||
UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition. This attack… | ||||
| CVE-2019-8268US | critical9.8 | — | ||
UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially resu… | ||||
| CVE-2019-8267US | high7.5 | — | ||
UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (DoS) condition. This attack appears to… | ||||
| CVE-2019-8266US | critical9.8 | — | ||
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potent… | ||||
| CVE-2019-8265US | critical9.8 | — | ||
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code e… | ||||
| CVE-2019-8264US | critical9.8 | — | ||
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploit… | ||||
| CVE-2019-8263US | medium6.5 | — | ||
UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial of service (DoS) condition. This attack… | ||||
| CVE-2019-8262US | critical9.8 | — | ||
UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploit… | ||||
| CVE-2019-8261US | critical9.8 | — | ||
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow. This attack appears to be exploitable via… | ||||
| CVE-2019-8260US | critical9.8 | — | ||
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow. This attack appears to be exploitable via network c… | ||||
| CVE-2019-8259US | high7.5 | — | ||
UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combi… | ||||
references
External citations — patches, advisories, analysis.
- SSA-927095: UltraVNC Vulnerabilities in SINUMERIK Products - HTML Versionself
- ICS Advisory ICSA-20-161-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-161-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (132)
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK Access MyMachine /P2P
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win10 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- MitigationSINUMERIK PCU base Win7 software /IPC
Restrict access to the device to the internal or VPN network and to trusted IP addresses only.
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK Access MyMachine /P2P
Update to V4.8
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win10 software /IPC
Update to V14.00
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
- FixedSINUMERIK PCU base Win7 software /IPC
Update to V12.01 HF4
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan